In the claims 

(Currently Amended) 1 . A method of monitoring a packet-switched network using 
traffic logs, comprising: 

(a) creating a histogram file; 

(b) generating a traffic log at a first location within the network based upon 
detection of a packet, the traffic log containing a plurality of values detected from the 
packet including a network entry point and a network exit point of the packet; 

(c) transferring the traffic log from the first location to a second location; 

(d) storing the traffic log generated by the network at the second location; 

(e) analyzing the stored traffic log to determine the time of creation of the traffic 
log and the network entry and exit points of the packet; and 

(f) updating the histogram file using at least the time of creation of the traffic log 
and at least one of the entry and exit points of the packet ; and 

(g) generating billing data for network use at the second location using 

information from the stored traffic logs. 

(Original) 2. The method of claim 1, wherein the histogram file is a flat file, whereby 
direct and rapid access to stored data is effected. 

(Original) 3. The method of claim 1 5 wherein two histogram files are created, a first 
histogram being representative of traffic being passed into the network and a second 
histogram being representative of the traffic being passed from the network. 

(Original) 4. The method of claim 1 , wherein the histogram file is representative of 
traffic passing to a host connected to the entry or exit point. 

(Original) 5. The method of claim 1, further comprising repeating steps (b) -(d) for at 
least a predetermined period. 
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(Original) 6. The method of claim 1, further comprising analyzing the traffic log to 
determine state information of a packet associated with the traffic log, and updating the 
histogram with the state information. 

(Original) 7. The method of claim 1, wherein the histogram plots packets per minute 
versus time. 

(Original) 8. The method of claim 1, further comprising broadcasting from a server 
computer data representative of the histogram to a client computer. 

(Original) 9. The method of claim 1, wherein the network is a Mobitex network. 

(Original) 10. The method of claim 1 5 further comprising displaying a histogram based on 
data in the histogram file. 

(Original) 11. The method of claim 1, further comprising creating at least one histogram 
for each host of the network. 

(Original) 12. The method of claim 11, further comprising selecting for display the at 
least one histogram for a particular host. 

(Original) 13. The method of claim 1, further comprising monitoring a central location of 
the network for new traffic logs. 

(Currently Amended) 14. A method of monitoring packet traffic through a node of a 
packet-switched network using traffic logs, comprising: 

(a) creating a histogram file for at least one node in the network; 

(b) generating a traffic log at a first location within the network based upon 
detection of a packet, the traffic log containing a plurality of values detected from the 
packet including a network entry point and a network exit point of the packet; 

(c) transferring the traffic log from the first location to a second location; 
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(d) storing the traffic log generated by the network at the second location; 

(e) analyzing the stored traffic log to determine the time of creation of the traffic 
log and the network entry and exit points of the packet; 

(f) determining a network path between the entry and exit points of the packet; 

(g) determining whether the node falls along the network path; and 

(h) updating the histogram file using at least the time of creation of the traffic log 
when the node falls along the network path ; and 

(i) generating billing data for network use at the second location using 
information from the stored traffic logs. 

(Original) 15. The method of claim 14, wherein the histogram file is a flat file. 

(Original) 16. The method of claim 14, wherein two histogram files are created, a first 
histogram being representative of traffic being passed towards a higher level of the 
network and a second histogram being representative of the traffic being passed towards 
a lower level of the network or outside the network. 

(Original) 17. The method of claim 14, further comprising repeating steps (b) (f) for at 
least a 24 hour period. 

(Original) 1 8. The method of claim 14, wherein the histogram plots packets per minute 
versus time. 

(Original) 19. The method of claim 14, further comprising broadcasting, from a server 
computer, data representative of the histogram to a client computer. 

(Original) 20. The method of claim 14, wherein the network is a Mobitex network. 

(Original) 21 . The method of claim 14, further comprising displaying a histogram based 
on data in the histogram file. 
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(Original) 22. The method of claim 14, further comprising creating at least one histogram 
for each node of the network. 

(Original) 23. The method of claim 14, further comprising selecting for display the at 
least one histogram for a particular node. 

(Original) 24. The method of claim 14, further comprising monitoring a central location 
of the network for new traffic logs. 

(Currently Amended) 25. A method of monitoring packet traffic passing through a 
link connecting two nodes of a packet-switched network using traffic logs, comprising: 

(a) creating a histogram file for at least one link in the network; 

(b) generating a traffic log at a first location within the network based upon 
detection of a packet, the traffic log containing a plurality of values detected from the 
packet including a network entry point and a network exit point of the packet and a 
number of bytes of the packet; 

(c) transferring the traffic log from the first location to a second location; 

(d) storing the traffic log generated by the network; 

(e) analyzing the traffic log to determine the time of creation of the traffic log and 
the network entry and exit points of the packet; 

(f) determining a network path between the entry and exit points; 

(g) determining whether the link falls along the network path; 

(h) determining a number of bytes carried by the packet associated with the traffic 
log; and 

(i) updating the histogram file using at least the time of creation of the traffic log 
and the number of bytes when the link falls along the network path ; and 

(\) generating billing data for network use at the second location using 
information from the stored traffic logs. 

(Original) 26. The method of claim 25, wherein the histogram file is a flat file. 
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(Original) 27. The method of claim 25, wherein two histogram files are created, a first 
histogram being representative of traffic being passed towards a higher level of the 
network and a second histogram being representative of the traffic being passed 
towards a lower level of the network or outside the network. 

(Original) 28. The method of claim 25, further comprising repeating steps (b) -(g) for at 
least a 24 hour period. 

(Original) 29. The method of claim 25, wherein the histogram plots bytes per second 
versus time. 

(Original) 30. The method of claim 25 further comprising broadcasting from a server 
computer to a client computer data representative of the histogram. 

(Original) 31. The method of claim 25, wherein the network is a Mobitex network. 

(Original) 32. The method of claim 25, further comprising displaying a histogram based 
on data in the histogram file. 

(Original) 33. The method of claim 25, further comprising creating at least one histogram 
for each link of the network. 

(Original) 34. The method of claim 25, further comprising selecting for display the at 
least one histogram for a particular link. 

(Original) 35. The method of claim 25, further comprising monitoring a central location 
of the network for new traffic logs. 

(Currently Amended) 36. A method of monitoring the operations of a packet- 
switched network, the network automatically generating a traffic log when a packet 
enters or exits the network by detecting values from the packet, the method comprising: 
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(a) detecting when a new traffic log is available at a network control center; 

(b) downloading the new traffic log to a server computer that maintains a plurality 
of histogram files; 

(c) updating at least one histogram file of the server computer using information 
available from the new traffic log by analyzing the new traffic log to determine one or 
more values detected from the packet that are stored by the new traffic log that are 
relevant to the at least one histogram; 

(d) deleting the new traffic log; and 

(e) making the updated at least one histogram file available to a client computer 
from the server computer ; and 

(f) generating billing data for network use at the network control center using 
information from the downloaded traffic logs. 

(Original) 37. The method of claim 36, wherein the histogram file is a flat file. 

(Original) 38. The method of claim 36, wherein the histogram is representative of traffic 
passing through or via at least one of a host connected to the network, a node in the 
network and a link connecting two nodes of the network. 

(Original) 39. The method of claim 36, wherein the network is a Mobitex network. 

(Original) 40. The method of claim 36, wherein the histogram includes information 
representative of a state of each of the packets associated, respectively, with each of the 
traffic logs. 

(Original) 41. The method of claim 36, further comprising broadcasting the histogram file 
to a plurality of client computers. 

(Original) 42. The method of claim 36, wherein step (c) comprises incrementing a value 
in the histogram file. 
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(Currently Amended) 43. A method of analyzing the performance of a packet- 
switched network, the network automatically generating a traffic log each time a packet 
exits the network, each traffic log including at least the time the traffic log was created, 
the addresses of the packet sender and packet recipient, and the entry and exit network 
nodes, the method comprising the steps of: 

(a) collecting at a centralized location a plurality of traffic logs from the network, 
with each traffic log containing information relevant to a different packet that has exited 
the network; 

(b) analyzing each of the plurality of traffic logs to determine information about 
each of the packets that have exited the network; 

(c) automatically generating a plurality of histograms, each histogram being 
based on information gleaned from the plurality of traffic logs about the packets that have 
exited the network, and 

(d) generating billing data for network use at the centralized location using 
information from the collected traffic logs, 

wherein at least one histogram is representative of packet traffic passing through a 
host connected to the network. 

(Original) 44. The method of claim 43, wherein at least one histogram is representative of 
packet traffic passing through a node of the network. 

(Original) 45. The method of claim 43, wherein at least one histogram is representative of 
data traffic travelling over a link in the network. 

(Original) 46. The method of claim 43, wherein the histograms are stored as flat files. 

(Original) 47. The method of claim 43, wherein steps (a) and (b) are carried out on a 
server computer and at least one histogram is supplied to a client computer. 

(Original) 48. The method of claim 43, further comprising displaying at least one 
histogram on a computer display. 
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(Currently Amended) 49. A system for monitoring a packet-switched network that 
automatically generates traffic logs, comprising: 

(a) a network control center at which the traffic logs are collected, with each 
traffic log containing a plurality of values detected from a packet including a network 
entry point and a network exit point; and 

(b) a computer operable to (i) create a histogram file, (ii) store a traffic log 
generated by the network, (iii) analyze the traffic log to determine the time of creation of 
the traffic log and the network entry and exit points of a packet, and (iv) update the 
histogram file using at least the time of creation of the traffic log and at least one of the 
entry and exit points of the packet , and (V) generate billing data for network use using 
information from the stored traffic logs. 

(Original) 50. The system of claim 49, wherein the histogram file is a flat file. 

(Original) 5 1 . The system of claim 49, wherein the computer creates two histogram files, 
a first histogram being representative of traffic being passed into the network and a 
second histogram being representative of the traffic being passed from the network. 

(Original) 52. The system of claim 49, wherein the histogram file is representative of 
traffic passing through a host connected to the entry or exit point. 

(Original) 53. The system of claim 49, wherein the computer analyzes the traffic log to 
determine state information of a packet associated with the traffic log, and updates the 
histogram with the state information. 

(Original) 54. The system of claim 49, wherein the histogram is a plot of packets per 
minute versus time. 

(Original) 55. The system of claim 49, wherein the computer is a server computer and the 
server computer broadcasts data representative of the histogram to a client computer. 



9 



(Original) 56. The system of claim 49, wherein the network is a Mobitex network. 

(Original) 57. The system of claim 49, wherein a client computer displays a histogram 
based on data in the histogram file. 

(Original) 58. The system of claim 49, wherein the computer creates at least one 
histogram for each host of the network. 

(Original) 59. The system of claim 49, wherein the computer monitors the network 
control center for new traffic logs. 

(Currently Amended) 60. A system for monitoring packet traffic through a node of a 
packet-switched network that automatically generates traffic logs, comprising: 

(a) a server connected to a network control center; and 

(b) a client connected to the server, 

wherein the server is operable to (i) create a histogram file for at least one node in 
the network, (ii) store a traffic log generated by the network that contains a plurality of 
values detected from a packet of the network, (iii) analyze the traffic log to determine the 
time of creation of the traffic log and the network entry and exit points of the packet, (iv) 
determine a network path between the entry and exit points, (v) determine whether the 
node falls along the network path, and (vi) update the histogram file using at least the 
time of creation of the traffic log when the node falls along the network path , and (vii) 
generate billing data for network use using information from the stored traffic logs. . 

(Original) 61. The system of claim 60, wherein the histogram file is a flat file. 

(Original) 62. The system of claim 60, wherein the server creates two histogram files, a 
first histogram being representative of traffic being passed towards a higher level of the 
network and a second histogram being representative of the traffic being passed towards 
a lower level of the network or outside the network. 
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(Original) 63. The system of claim 60, wherein the histogram is a plot of packets per 
minute versus time. 

(Original) 64. The system of claim 60, wherein the server broadcasts to the client data 
representative of the histogram. 

(Original) 65. The system of claim 60, wherein the network is a Mobitex network. 

(Original) 66. The system of claim 60, wherein the client displays a histogram based on 
data in the histogram file. 

(Original) 67. The system of claim 60, wherein the server creates at least one histogram 
for each node of the network. 

(Original) 68. The system of claim 60, wherein the client is operable to select for display 
the at least one histogram for a particular node. 

(Currently Amended) 69. A system for monitoring packet traffic passing through a 
link connecting two nodes of a packet-switched network that automatically generates 
traffic logs, comprising: 

(a) a server; and 

(b) a client connected to the server, 

wherein the server is programmed to (i) create a histogram file for at least one 
link in the network, (ii) store a traffic log generated by the network that contains a 
plurality of values detected from a packet of the network including a network entry point, 
a network exit point, and a number of bytes of the packet, (iii) analyze the traffic log to 
determine the time of creation of the traffic log and the network entry and exit points of 
the packet, (iv) determine a network path between the entry and exit points, (v) determine 
whether the link falls along the network path, (vi) analyze the traffic log to determine the 
number of bytes carried by the packet associated with the traffic log, and (vii) update the 
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histogram file using at least the time of creation of the traffic log and the number of bytes 
when the link falls along the network path , (viii) generate billing data for network use 
using information from the stored traffic logs. . 

(Original) 70. The system of claim 69, wherein the histogram file is a flat file. 

(Original) 71. The system of claim 69, wherein the server creates two histogram files, a 
first histogram being representative of traffic being passed towards a higher level of the 
network and a second histogram being representative of the traffic being passed towards 
a lower level of the network or outside the network. 

(Original) 72. The system of claim 69, wherein the histogram is a plot of bytes per second 
versus time. 

(Original) 73. The system of claim 69, wherein the server broadcasts to the client data 
representative of the histogram. 

(Original) 74. The system of claim 69, wherein the network is a Mobitex network. 

(Original) 75. The system of claim 69, wherein the client displays a histogram based on 
data in the histogram file. 

(Original) 76. The system of claim 69, wherein the server creates at least one histogram 
for each link of the network. 

(Original) 77. The system of claim 69, wherein the client is operable to select for display 
the at least one histogram for a particular link. 

(Currently Amended) 78. A system for monitoring the operations of a packet- 
switched network, the network automatically generating a traffic log when a packet 
enters or exits the network, the system comprising: 
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a server, in communication with a network control center, for detecting when a 
new traffic log is available at the network control center, for downloading the new traffic 
log, aad-for updating at least one histogram file using information available from the new 
traffic log by analyzing the traffic log to determine one or more values detected from the 
packe t, and for generating billing data for network use using information from the stored 
traffic logs. ; and 

a client computer for displaying the histogram. 

(Original) 79. The system of claim 78, wherein the histogram file is a flat file. 

(Original) 80. The system of claim 78, wherein the histogram is representative of traffic 
passing through or via at least one of a host connected to the network, a node in the 
network and a link connecting two nodes of the network. 

(Original) 81. The system of claim 78, wherein the network is a Mobitex network. 

(Original) 82. The system of claim 78, wherein the histogram includes information 
representative of a state of each of the packets associated, respectively, with each of the 
traffic logs. 

(Original) 83. The system of claim 78, wherein the server broadcasts the histogram file to 
a plurality of client computers. 

(Currently Amended) 84. A system for analyzing the performance of a packet- 
switched network, the network automatically generating a traffic log each time a packet 
enters or exits the network, each traffic log including at least the time the traffic log was 
created, the address of the packet sender and packet recipient, and the entry and exit 
network nodes, the system comprising: 

(a) a traffic log database containing a plurality of traffic logs, each traffic log 
containing a plurality of values detected from a packet; and 
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(b) a computer, the computer operable to download traffic logs from the traffic 
log database, to analyze each of the traffic logs to determine one or more values detected 
from each of the packets, aad-to generate and store a plurality of histograms, each 
histogram being generated from information gleaned from the plurality of traffic logs 
about each of the packets, and to generate billing data for network use using information 
from the stored traffic logs, 

wherein at least one histogram is representative of packet traffic passing through 
or over at least one of a host connected to the network, a node of the network, and a link 
in the network. 

(Original) 85. The system of claim 84, wherein the histograms are stored as flat files. 

(Original) 86. The system of claim 84, wherein the computer is a server computer. 

(Original) 87. The system of claim 84, wherein the at least one histogram is supplied to a 
client computer. 
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